Someone should write a boilerplate "we've been hacked" blog post with parameters for the kind of hashing and factors of authentication used, and what they know

Someone should write a boilerplate "we've been hacked" blog post with parameters for the kind of hashing and factors of authentication used, and what they know - or don't know - was compromised. I can't blame companies for not having one such on hand to begin with, but I'm sure they'd appreciate that someone with the unfortunate experience crafted a draft for them in stressful times like these.